The host is running Virtual Vertex Muster and is prone to directory traversal vulnerability.

Successful exploitation will allow attacker to obtain sensitive information that could aid in further attacks. Impact Level: Application

Upgrade to Virtual Vertex Muster version 6.2.0 or later. For updates refer to http://www.vvertex.com/index.php

The flaw is due to improper validation of URI containing ../(dot dot) sequences, which allows attackers to read arbitrary files via directory traversal attacks.

Virtual Vertex Muster version 6.1.6

• http://secunia.com/advisories/46991
• http://www.securelist.com/en/advisories/46991
• http://www.security-assessment.com/files/documents/advisory/Muster-Arbitrary_File_Download.pdf

---

Updated on 2015-03-25